- read X-AUTH-TOKEN from headers for the rest resource /balances and /stocks and query the database
 for googleId equal value from header X-AUTH-TOKEN